PT-2023-3686 · Zyxel · Zyxel Nxc2500+6

Lê Hữu Quang Linh · Publicado 2023-05-26 · Atualizado 2023-07-26 · CVE-2023-34141

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2 Zyxel USG FLEX series firmware versions 5.00 through 5.36 Patch 2 Zyxel USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2 Zyxel USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2 Zyxel VPN series firmware versions 5.00 through 5.36 Patch 2 Zyxel NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3) Zyxel NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4)

Description A command injection vulnerability in the access point management feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance. The vulnerability is related to the failure to neutralize special elements used in the operating system command.

Recommendations For Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG FLEX series firmware versions 5.00 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel VPN series firmware versions 5.00 through 5.36 Patch 2, update to a version later than 5.36 Patch 2. For Zyxel NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), update to a version later than 6.10(AAIG.3). For Zyxel NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), update to a version later than 6.10(AAOS.4). As a temporary workaround, consider restricting access to the access point management feature to minimize the risk of exploitation.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2023-03971

CVE-2023-34141

Produtos afetados

Zyxel Atp Series

Zyxel Nxc2500

Zyxel Nxc5500

Zyxel Usg Flex 50(W) Series

Zyxel Usg Flex Series

Zyxel Usg20(W)-Vpn Series

Zyxel Vpn Series

Referências · 7

• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-03971 · Nota de Segurança
• https://t.me/cvenotify/54521 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34141 · Aviso do Fabricante
• https://vuldb.com/ru/?id.234353 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-34141 · Nota de Segurança
• https://t.me/cvenotify/55247 · Publicação no Telegram